[Nfdump-discuss] Option 50 "sampler_random_interval" length not supported

[ibrahim m. <ibr...@ho...>]

Hi All,

Nfcapd is not getting sampling rate correctly from netflow v9 options. 

I'm getting this error message: 

Aug 18 14:04:42 centos66 nfcapd: Process_v9: Option field Type: 48, length 4 not supported
Aug 18 14:04:42 centos66 nfcapd: Process_v9: Option field Type: 50, length 2 not supported

A Cisco router is sending: option 48 of length 4 bytes 
                                   and option 50 of length 2 bytes

The standard sizes should be : option 48 of length 1 byte
                                          and option  50 of length 4 bytes

So the error messages! however, if we look atRFC 7011 section 6.2 [1] , we see that collector should support reduced size fields!


Are there any patch to solve this issue? any plan to support it? if no, how hard would it be to implement the patch?

Thank you.

Ibrahim

[1] https://tools.ietf.org/html/rfc7011#section-6.2